AuthenticationContext.cs

Go to the documentation of this file.

using System;
using System.Linq;
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Models;

namespace Tgstation.Server.Host.Security
{
    sealed class AuthenticationContext : IAuthenticationContext
    {
        public User User { get; }

        public InstanceUser InstanceUser { get; }

        public ISystemIdentity SystemIdentity { get; }

        public AuthenticationContext() { }

        public AuthenticationContext(ISystemIdentity systemIdentity, User user, InstanceUser instanceUser)
        {
            User = user ?? throw new ArgumentNullException(nameof(user));
            if (systemIdentity == null && User.SystemIdentifier != null)
                throw new ArgumentNullException(nameof(systemIdentity));
            InstanceUser = instanceUser;
            SystemIdentity = systemIdentity;
        }

        public void Dispose() => SystemIdentity?.Dispose();

        public ulong GetRight(RightsType rightsType)
        {
            var isInstance = RightsHelper.IsInstanceRight(rightsType);

            if (User == null)
                throw new InvalidOperationException("Authentication context has no user!");

            if (isInstance && InstanceUser == null)
                return 0;
            var rightsEnum = RightsHelper.RightToType(rightsType);

            // use the api versions because they're the ones that contain the actual properties
            var typeToCheck = isInstance ? typeof(InstanceUser) : typeof(User);

            var nullableType = typeof(Nullable<>);
            var nullableRightsType = nullableType.MakeGenericType(rightsEnum);

            var prop = typeToCheck.GetProperties().Where(x => x.PropertyType == nullableRightsType).First();

            var right = prop.GetMethod.Invoke(isInstance ? (object)InstanceUser : User, Array.Empty<object>());

            if (right == null)
                throw new InvalidOperationException("A user right was null!");
            return (ulong)right;
        }
    }
}